Did you read my message? Thats already been tried!
↧
Forum Post: RE: Sophos Endpoint - Cloud Controlled - Unable to update or Remove - Tried all I can think of........
↧
Forum Post: RE: Firewall not being discovered in Central Firewall Manager
Ravi I am able to resolve CFM domain name us-e1.cfm.sophos.com to required IP I changed central management from syslog to HTTPS on port 443 The xg is set synchronization mode for: Device will fetch configuration changes from Central Management I checked the logs of the xg and it still shows: Failed to send heartbeat from device to sfm Message id 17910 and Failed to send information collection from device to sfm Message id John
↧
↧
Forum Post: RE: Country Blocking Not Working for a WAN > LAN Rule
Sachin, I have sent a PM to you. Regards
↧
Forum Post: Times out trying to access the UTM9 web console when using web protection
We are hoping you can help us. We are investigating using Sophos UTM9 for web protection running firmware 9.501-5 and have come across an annoying situation. We have the web protection setup and working and use group policy to push out the proxy settings (ip address & port 8080) to our test users which is the same IP address as the UTM web console. However, now when we try to access the UTM9 console the web page tab just says "waiting for 192.168.xxx.xxx" and the log is below: 2017:08:17-13:39:43 sqldcsos01 httpproxy[7170]: id="0003" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="10.30.30.201" dstip="" user="" group="" ad_domain="" statuscode="407" cached="0" profile="REF_HttProContaInterNetwo (QLDC_General)" filteraction=" ()" size="85226" request="0x14c9f600" url=" https://192.168.xxx.xxx:4444/ " referer="" error="" authtime="19" dnstime="0" cattime="0" avscantime="0" fullreqtime="3048" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" exceptions="" 2017:08:17-13:39:59 sqldcsos01 httpproxy[7170]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="plain_write_vector" file="epoll.c" line="1117" message="Write error on the epoll handler 88 (Broken pipe)" Eventually the following is displayed in the web page: This page can’t be displayed Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings and try connecting to https://192.168.xxx.xxx:4444 again. If this error persists, it is possible that this site uses an unsupported protocol or cipher suite such as RC4 (link for the details) , which is not considered secure. Please contact your site administrator. I am very new to the Sophos world so any help would be most welcome. I was wondering if it's because the proxy setting is the same ip address as the UTM console just a different port.
↧
Forum Post: RE: Unable to uninstall Sophos Management Server SEC 5.3.1
I suspect the domain change is related. Do you have an MSI uninstall log to check? I assume it's just the Sophos Management Server component that's you're having issues with removing? I would probably follow: https://support.microsoft.com/en-us/help/223300/how-to-enable-windows-installer-logging to ensure Window Installer is logging. Perform the uninstall and then harvest the uninstall log. Feel free to link it here. Note: you can also use the switches to Msiexec for the uninstall: /L*V "C:\windows\temp\msilog.txt"
↧
↧
Forum Post: Steps I used to remove Sophos Home (beta 1.2.3) on Windows 10
Reading the forums, there seems to be uninstall issues many people are having, mainly from the Sophos services are still running. So I was curious and successfully uninstalled Sophos Home beta 1.2.3 on my Windows 10 Pro computer using the following steps from my admin user login. The summary is to stop Sophos related services that are running before running the uninstaller. To Uninstall: 1. Turn off all Sophos protection options via the online Sophos dashboard. 2. Via Window's "services.msc" program, stop and disable all HitmanPro and Sophos related services properties, especially Sophos AutoUpdate Service. 3. Reboot and check no services disabled in Step 2 are running/active. 4. Start uninstall using IObit Uninstaller and select the Sophos Home entry (even though IObit finds other entries like HitmanPro, Sophos Home Clean, etc in addition to Sophos Home). Watching the uninstaller for Sophos Home indicates it removes other related components like HitmanPro, Sophos AutoUpdate, etc. NOTE: It did not ask me for install/admin password, maybe because the Sophos services are disabled before I uninstalled and/or my windows user login has admin privilege. 5. In IObit Uninstaller, also select option to find & delete registry keys by selecting Powerful Scan option. In my case it did not find any. I also ran CCleaner's registry cleaner feature to find Sophos related registry keys just in case (it did find unreferenced Sophos folders but I don't consider this critical). NOTE: Given results I had from Steps 4 and 5, I would think that after stopping the Sophos services, you can just uninstall Sophos Home using the normal Windows Add/ Remove programs and then run CCleaner registry cleaner to take care of leftover HitmanPro & Sophos registry entries. Patrick
↧
Forum Post: RE: Unable to uninstall Sophos Management Server SEC 5.3.1
Hey Jak, Thanks for your reply. That's right it's that component I'm having trouble removing. I've enabled the logging and attached the msilog.txt file that was produced during uninstall: (Please visit the site to view this file) Please feel free to let me know if you have any questions! Cheers, Christian
↧
Forum Post: Upload a new https certification to Sophos portal
I have the CSR and Pulic SSL and Intermediate CA keys from the provider. Need to convert them to PEM format in order to upload them in to Sophos Portal. Could anyone please guide me.
↧
Forum Post: RE: Quarantine digest mail not received
Also having this 'problem' or 'bug'
↧
↧
Forum Post: RE: LAB-in-A-Box - Help with configuring UTM VM with multiple ESX vSwitch vLAN interfaces on the internal nic
1st rule was configured by the configuration wizard. Added a Masquerading Rule to allow traffice from VLAN 199 to accesss the internet. 1st rule is created to turn off the FW but this did not work 2nd rule added LabNet-MGT vlan 199 but this does not seem to work I can ping the WAN IP and also my home router gateway from a VM residing on vlan 199 but can't seem to get the traffic to flow through.
↧
Forum Post: RE: SSO-principle for Windows domain using VPN is not complete?
It's a pity, because it seems possible according to this proposal which Sophos rejected but in the following discussion it seems technically possible.
↧
Forum Post: RE: super simple firewall rule not working?
Thanks, Yeah, I have all my devices mapped to static dhcp reservations. thats how they show up in the source networks so i can add them to firewall rules and web filtering profiles.
↧
Forum Post: RE: Change Country Blocking From Block To Warn?
Thanks Bob this helped alot cheers
↧
↧
Comment on SFOS 16.05.6 MR6 Released
I am having issue with authentication suddenly without our knowledge domain users get authenticated , which is wrong as whenver we are working we are getting an irritated.
↧
Forum Post: Clone sophos xg Home
i have sophos xg installed on PC i want to clone the HDD to an image or to New HDD how can i do
↧
Comment on SFOS 16.05.6 MR6 Released
Youtube Filter. please do even provide an you tube filter option so we should have all type of videos filter so that will be more helpful.
↧
Forum Post: XG310 Cacti Snmp how to set up?
XG310 Cacti Snmp how to set up? Cacti Version 0.8.8b XG310 (SFOS 16.05.5 MR-5) Why show Snmp error, where is my setting wrong? Sophos X310 setting
↧
↧
Forum Post: RE: Installation could not be started - Error code 80072afc
OK, so I tried to image again this morning. After completion, the PC is in a domained state, it can login, updated GPO's and everything works without issues with the PC itself. I can see the PC name has appeared in the Enterprise console. But it is greyed out, if I right click the "protect computers" is greyed out. If I double click on it, it shows that it knows it is Windows 7, and it knows the computer name, all other fields (IP address etc) are empty. On other machines that work most fields are populated. I went to Discover Computers and tried that way, but that did not make a difference, technically the computer is in the list, but I cannot do anything with it :( Again, UAC disabled and firewall off etc for testing. Thanks again in advance
↧
Forum Post: RE: Installation could not be started - Error code 80072afc
I figured out that issue, I needed to wait for the sync to take place with AD, it is set to every 60 mins... So back to the original issue :) I tried to hit protect computers and tried to look at the task scheduler to see what was going on, I kept hitting refresh to see if the Sophos task came up, but I didn't see it appear. It took about 20 seconds to fail with the same error on the console. I went into C:\Windows\Tasks and there is a task there called Sophos_InstTask.JOB just sitting there now. But again, I am unable to add Sophos to the machine. Again, if I look against other machines in the console and double click, it shows all the details as below Where as, the new machine I am trying to deploy is only showing the following: You can see there is a bunch of stuff missing...Not sure if that helps with what could be causing this?
↧
Forum Post: RE: Question Active Directory XG Firewall
Hi , Could you post a snapshot of of your settings for IPsec VPN Phase 1 Encryptions used DH group no and the same for Phase 2
↧